$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b9f502e-f4e8-492a-8ee9-98acf2737db2/2b9f502e-f4e8-492a-8ee9-98acf2737db2.mft File: 2b9f502e-f4e8-492a-8ee9-98acf2737db2.mft (raw, json) Hash identifier: cdVFYHuk6KQvgome0rixbOHqHow+UJ9SQxt3C0y7La4= Subject key identifier: DA:08:08:7A:CE:CD:DE:56:D5:A3:AC:27:E9:90:87:EE:52:98:B0:A1 Authority key identifier: 8F:F4:06:3A:0B:CF:30:E3:96:26:F0:9F:E0:A7:52:73:52:44:D7:F3 Certificate issuer: /CN=2b9f502e-f4e8-492a-8ee9-98acf2737db2 Certificate serial: 010D0C9F4328584D051D909E303429ADDD7AD9C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b9f502e-f4e8-492a-8ee9-98acf2737db2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b9f502e-f4e8-492a-8ee9-98acf2737db2/2b9f502e-f4e8-492a-8ee9-98acf2737db2.mft Manifest number: 010D0C9F4328584073A83C9769D1894E67DB1940 Signing time: Sun 01 Mar 2026 04:00:08 +0000 Manifest this update: Sun 01 Mar 2026 04:00:08 +0000 Manifest next update: Wed 04 Mar 2026 04:00:00 +0000 Files and hashes: 1: 2b9f502e-f4e8-492a-8ee9-98acf2737db2.crl (hash: WJqvLZ53oCpI7V+A/NLkjV4sFEd7SrGTT1DEmcmjj2M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b9f502e-f4e8-492a-8ee9-98acf2737db2/2b9f502e-f4e8-492a-8ee9-98acf2737db2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b9f502e-f4e8-492a-8ee9-98acf2737db2/2b9f502e-f4e8-492a-8ee9-98acf2737db2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b9f502e-f4e8-492a-8ee9-98acf2737db2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:05:1d:90:9e:30:34:29:ad:dd:7a:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b9f502e-f4e8-492a-8ee9-98acf2737db2 Validity Not Before: Mar 1 04:00:08 2026 GMT Not After : Mar 4 04:00:00 2026 GMT Subject: CN=d8f18c52-2615-42f1-916d-044123c4a4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4e:72:e5:bf:9d:62:06:e0:d2:28:98:d5:9b: da:17:91:b5:ea:85:d8:2e:52:c2:a7:4f:d1:53:f9: cc:44:42:2f:91:55:61:b5:61:a6:da:53:c7:e1:8a: ed:a1:d7:9d:58:cc:54:24:53:d2:82:b4:50:92:a9: b7:a3:1c:47:7b:c6:87:f0:4c:78:6b:36:e6:03:c6: c8:07:d5:e0:8f:40:6a:60:d8:a3:60:30:24:24:aa: 77:da:ca:8b:71:55:8b:6c:73:8c:b0:00:44:07:25: 64:c6:8d:27:82:4a:7e:e3:1c:af:60:e6:2c:54:f6: 33:7f:5d:0a:6f:2f:6c:7b:3f:c4:1c:4e:f2:51:77: c0:dd:ac:e7:69:b1:4f:87:52:70:ba:4a:d4:e5:3d: 4d:e9:ba:42:0e:e6:ce:b4:ec:a4:f8:e3:74:4d:ca: bf:b6:61:f1:50:36:c5:d7:20:af:76:00:e0:55:13: c8:9c:1c:a7:d3:63:a5:e5:d5:b1:ae:00:38:ff:76: 1d:71:42:58:7e:48:f5:0d:e0:70:db:2d:8a:f7:b3: 15:eb:8e:04:47:db:63:12:b0:a1:37:23:cc:b4:8b: fa:4c:fb:20:56:b5:fb:ea:a9:50:fa:1b:eb:23:c9: 98:8a:30:9c:47:b0:a4:cc:38:4c:8a:9c:49:5e:46: 00:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:08:08:7A:CE:CD:DE:56:D5:A3:AC:27:E9:90:87:EE:52:98:B0:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b9f502e-f4e8-492a-8ee9-98acf2737db2/2b9f502e-f4e8-492a-8ee9-98acf2737db2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b9f502e-f4e8-492a-8ee9-98acf2737db2/2b9f502e-f4e8-492a-8ee9-98acf2737db2.crl X509v3 Authority Key Identifier: keyid:8F:F4:06:3A:0B:CF:30:E3:96:26:F0:9F:E0:A7:52:73:52:44:D7:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b9f502e-f4e8-492a-8ee9-98acf2737db2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7f:99:fa:63:c2:73:d4:fb:a8:06:c0:97:00:70:a3:84:5a: 08:fd:da:1b:30:21:18:a4:d4:63:4e:eb:ab:df:44:b6:c5:c5: 2e:bc:d9:6d:3e:1b:4b:11:97:13:78:11:44:e6:79:81:4b:02: cc:53:1f:b9:16:27:76:fb:99:b1:2e:49:75:26:29:c3:d7:1b: 9c:9b:1c:90:93:ea:55:25:21:e1:77:af:1e:8b:2c:0c:eb:e9: 5c:65:ac:a7:bd:65:d3:95:96:95:25:77:15:5c:c2:df:5a:79: 38:c6:1c:8a:bd:b2:d7:e2:58:8f:fa:07:5a:39:8c:90:98:57: 45:b3:0e:ad:ac:07:a7:5e:54:f9:46:b8:23:28:7a:d4:2b:df: 9d:6f:80:2d:b8:b0:a4:16:f2:d6:45:cd:f3:2f:3c:58:58:1f: ce:0a:eb:62:86:47:00:21:da:08:20:cd:76:be:45:10:3f:8a: b3:c7:e5:03:a4:c5:7b:62:85:31:4e:d3:ba:27:a9:c3:7e:86: 2b:b2:0f:0d:c6:5f:77:66:8d:6a:99:d2:40:2d:e2:79:f4:8e: e2:31:42:fb:82:b0:42:ef:03:41:6a:d2:f5:b9:19:45:34:de: bd:7b:b5:4e:7c:a6:a3:25:a2:3b:1e:08:f1:cc:d4:c2:a4:18: c5:f6:13:97 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0FHZCeMDQprd162cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI5ZjUwMmUtZjRlOC00OTJhLThlZTktOThhY2YyNzM3 ZGIyMB4XDTI2MDMwMTA0MDAwOFoXDTI2MDMwNDA0MDAwMFowLzEtMCsGA1UEAxMk ZDhmMThjNTItMjYxNS00MmYxLTkxNmQtMDQ0MTIzYzRhNGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE5y5b+dYgbg0iiY1ZvaF5G16oXYLlLCp0/R U/nMREIvkVVhtWGm2lPH4YrtodedWMxUJFPSgrRQkqm3oxxHe8aH8Ex4azbmA8bI B9Xgj0BqYNijYDAkJKp32sqLcVWLbHOMsABEByVkxo0ngkp+4xyvYOYsVPYzf10K by9sez/EHE7yUXfA3aznabFPh1JwukrU5T1N6bpCDubOtOyk+ON0Tcq/tmHxUDbF 1yCvdgDgVRPInByn02Ol5dWxrgA4/3YdcUJYfkj1DeBw2y2K97MV644ER9tjErCh NyPMtIv6TPsgVrX76qlQ+hvrI8mYijCcR7CkzDhMipxJXkYAcQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNoICHrOzd5W1aOsJ+mQh+5SmLChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYjlm NTAyZS1mNGU4LTQ5MmEtOGVlOS05OGFjZjI3MzdkYjIvMmI5ZjUwMmUtZjRlOC00 OTJhLThlZTktOThhY2YyNzM3ZGIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmI5ZjUwMmUtZjRlOC00OTJhLThl ZTktOThhY2YyNzM3ZGIyLzJiOWY1MDJlLWY0ZTgtNDkyYS04ZWU5LTk4YWNmMjcz N2RiMi5jcmwwHwYDVR0jBBgwFoAUj/QGOgvPMOOWJvCf4KdSc1JE1/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYjlmNTAyZS1mNGU4LTQ5MmEtOGVlOS05OGFj ZjI3MzdkYjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJf5n6Y8Jz1PuoBsCXAHCj hFoI/dobMCEYpNRjTuur30S2xcUuvNltPhtLEZcTeBFE5nmBSwLMUx+5Fid2+5mx Lkl1JinD1xucmxyQk+pVJSHhd68eiywM6+lcZaynvWXTlZaVJXcVXMLfWnk4xhyK vbLX4liP+gdaOYyQmFdFsw6trAenXlT5RrgjKHrUK9+db4AtuLCkFvLWRc3zLzxY WB/OCutihkcAIdoIIM12vkUQP4qzx+UDpMV7YoUxTtO6J6nDfoYrsg8Nxl93Zo1q mdJALeJ59I7iMUL7grBC7wNBatL1uRlFNN69e7VOfKajJaI7HgjxzNTCpBjF9hOX -----END CERTIFICATE-----Generated at Sun Mar 1 19:48:38 2026 by rpki-client